← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1311357] [NEW] Swift.py does not respect the OPENSTACK_SSL_NO_VERIFY setting for use with self signed certs

 

Public bug reported:

The swift api client connection does not respect the OPENSTACK_SSL_NO_VERIFY setting in local_settings.py.
This results in a test deployment with self signed certificates not being able to use the Horizon project containers web interface with an SSL verification error.

A patch would be something like this:


diff -Naur openstack-dashboard/openstack_dashboard/api/swift.py openstack-dashboard.new/openstack_dashboard/api/swift.py
--- openstack-dashboard/openstack_dashboard/api/swift.py	2014-04-22 21:44:37.293082690 +0000
+++ openstack-dashboard.new/openstack_dashboard/api/swift.py	2014-04-22 21:47:57.541082727 +0000
@@ -108,6 +108,7 @@
 
 def swift_api(request):
     endpoint = base.url_for(request, 'object-store')
+    insecure = getattr(settings, 'OPENSTACK_SSL_NO_VERIFY', False)
     cacert = getattr(settings, 'OPENSTACK_SSL_CACERT', None)
     LOG.debug('Swift connection created using token "%s" and url "%s"'
               % (request.user.token.id, endpoint))
@@ -117,6 +118,7 @@
                                          preauthtoken=request.user.token.id,
                                          preauthurl=endpoint,
                                          cacert=cacert,
+                                         insecure=insecure,
                                          auth_version="2.0")

** Affects: horizon
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1311357

Title:
  Swift.py does not respect the OPENSTACK_SSL_NO_VERIFY setting for use
  with self signed certs

Status in OpenStack Dashboard (Horizon):
  New

Bug description:
  The swift api client connection does not respect the OPENSTACK_SSL_NO_VERIFY setting in local_settings.py.
  This results in a test deployment with self signed certificates not being able to use the Horizon project containers web interface with an SSL verification error.

  A patch would be something like this:

  
  diff -Naur openstack-dashboard/openstack_dashboard/api/swift.py openstack-dashboard.new/openstack_dashboard/api/swift.py
  --- openstack-dashboard/openstack_dashboard/api/swift.py	2014-04-22 21:44:37.293082690 +0000
  +++ openstack-dashboard.new/openstack_dashboard/api/swift.py	2014-04-22 21:47:57.541082727 +0000
  @@ -108,6 +108,7 @@
   
   def swift_api(request):
       endpoint = base.url_for(request, 'object-store')
  +    insecure = getattr(settings, 'OPENSTACK_SSL_NO_VERIFY', False)
       cacert = getattr(settings, 'OPENSTACK_SSL_CACERT', None)
       LOG.debug('Swift connection created using token "%s" and url "%s"'
                 % (request.user.token.id, endpoint))
  @@ -117,6 +118,7 @@
                                            preauthtoken=request.user.token.id,
                                            preauthurl=endpoint,
                                            cacert=cacert,
  +                                         insecure=insecure,
                                            auth_version="2.0")

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1311357/+subscriptions


Follow ups

References